simpleledger

Products

ProductCVEsExploitedLatest
slpjs2–Jul 30, 2020
Electron-Cash-SLP1–Apr 28, 2020
slp-validate1–May 12, 2020
slp-validate.js1–Jul 30, 2020

Exploited and recent CVEs

  • CVE-2020-15130 High 7.5 False-positive validity for NFT1 genesis transactions in SLPJS 1.0%
  • CVE-2020-15131 High 7.5 False-positive validity for NFT1 genesis transactions in SLP Validate 1.0%
  • CVE-2020-11072 High 8.6 False-negative validation results in MINT transactions with invalid baton 1.0%
  • CVE-2020-11071 High 8.6 False-negative validation results in MINT transactions with invalid baton 0.9%
  • CVE-2020-11014 Medium 6.1 BIP LI01 output reordering may cause malformed SLP MINT transactions in Electron-Cash-SLP 1.6%